CLAIMS 



1. A computer system comprising- a network (100); a server computer 
(110, 120) connected to the network; a plurality of client computers (11, 12, 

5 21) connectable to the network; and portable information recording media 
(Rll, R12, R2l) issued respectively to individual users for use upon 
connection to the client computers! wherein 

a unique identification code (ID(ll), ID(l2), ID(2l)) is recorded in 
each of the client computers (11, 12, 21) so as to enable distinction from 
10 other client computers, 

an identification code (ID(ll), ID(l2), ID(2l)) that corresponds to a 
specific identification code recorded in a specific client computer is recorded 
in each of the portable information recording media (Rll, R12, R21), and 

each of the client computers (11, 12, 21) comprises an interface 
15 means (11D) for connecting a portable information recording medium (Rll, 
R12, R2l), an identification code comparing means (11C) that compares an 
identification code recorded in a currently connected portable information 
recording medium (Rll) and an identification code recorded in itself, an 
access right setting means (11B) that sets a predetermined access right 
20 based on a comparison result, and a server access means (11A) that 
performs access to the server computer within a range of the access right 
that has been set. 

2. A computer system comprising* a network (100); a server computer 
25 (110, 120) connected to the network; a plurality of client computers (11, 12, 

21) connectable to the network; and portable information processing devices 

(Pll) issued respectively to individual users for use upon connection to the 

client computers; wherein 

a unique identification code (ID(ll), ID(12), ID(2l)) is recorded in 
30 each of the client computers (11, 12, 21) so as to enable distinction from 

other client computers, 

an identification code (ID(ll)) that corresponds to a specific 

identification code recorded in a specific client computer is recorded in each 

of the portable information processing devices (Pll), 
35 each of the client computers (11, 12, 21) comprises an interface 

means (11D) for connecting a portable information processing device (Pll), 
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and a server access means (11A) that performs access to the server 
computer (110, 120) within a range of an access right that is transmitted 
from a currently connected portable information processing device (Pll), 
and 

5 each of the portable information processing devices (Pll) comprises 

an identification code comparing means (HE) that compares an 
identification code (ID(ll)) recorded in a currently connected client 
computer (11) and an identification code (ID(ll)) recorded in itself, an 
access right setting means (11F) that sets a predetermined access right 
10 based on a comparison result, and an access right transmitting means (11G) 
that transmits, to the currently connected client computer (ll), the access 
right that has been set. 

3. The computer system according to Claim 1 or 2, wherein 
15 the access right setting means (11B, 11F) sets a first access right 

when the comparison result indicates matching and sets a second access 
right, with more restrictions than the first access right, when the 
comparison result indicates mismatching. 

20 4. The computer system according to any one of Claims 1 through 3, 
wherein 

a MAC address provided to a LAN communication circuit 
incorporated in a client computer (11, 12, 21), unique data stored in a 
storage device of the client computer (11, 12, 21), or information indicating 
25 an arrangement of application programs stored in a storage device of the 
client computer (11, 12, 21) is used as a unique identification code for 
identifying the client computer (11, 12, 21). 

5. A computer system comprising: a network (100); a server computer 
30 (110, 120) connected to the network; a plurality of client computers (11, 12, 

21) connectable to the network; and portable information recording media 

(Rll, R12, R21) issued respectively to individual users for use upon 

connection to the client computers; wherein 

environment information (ENV(ll), ENV(12), ENV(2l)) that 
35 indicates a specific network environment that is obtained when a client 

computer (11, 12, 21) is connected to a specific location of the network (100) 
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is recorded in each of the portable information recording media (Rll, R12, 
R21), and 

each of the client computers (11, 12, 21) comprises an interface 
means (11D) for connecting a portable information recording medium (Rll, 
5 R12, R2l), an environment comparing means (11H) that compares a 
network environment indicated by environment information (ENV(ll)) 
recorded in a currently connected portable information recording medium 
(Rll) and a current network environment of itself, an access right setting 
means (11B) that sets a predetermined access right based on a comparison 
10 result, and a server access means (11A) that performs access to the server 
computer within a range of the access right that has been set. 

6. A computer system comprising: a network (100); a server computer 

(110, 120) connected to the network; a plurality of client computers (11, 12, 
15 21) connectable to the network; and portable information processing devices 

(Pll) issued respectively to individual users for use upon connection to the 

client computers; wherein 

environment information that indicates a specific network 

environment that is obtained when a client computer (11, 12, 21) is 
20 connected to a specific location of the network (100) is recorded in each of 

the portable information processing devices (Pll), 

each of the client computers (11, 12, 21) comprises an interface 

means (11D) for connecting a portable information processing device (Pll), 

and a server access means (11A) that performs access to the server 
25 computer (110, 120) within a range of an access right that is transmitted 

from a currently connected portable information processing device (Pll), 

and 

each of the portable information processing devices (Pll) comprises 
an environment comparing means (ill) that compares a network 

30 environment of a currently connected client computer and a network 
environment indicated by environment information (ENV(ll)) recorded in 
itself, an access right setting means (11F) that sets a predetermined access 
right based on a comparison result, and an access right transmitting means 
(11G) that transmits, to the currently connected client computer (ll), the 

35 access right that has been set. 
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7. The computer system according to Claim 5 or 6, wherein 

the access right setting means (11B, 11F) sets a first access right 
when the comparison result indicates matching and sets a second access 
right, with more restrictions than the first access right, when the 
5 comparison result indicates mismatching. 

8. The computer system according to any one of Claims 5 through 7, 
wherein 

an IP address provided to a client computer (11, 12, 21), a default 
10 gateway address set for the client computer (11, 12, 21), a proxy server 
address set for the client computer (11, 12, 21), or a domain name which can 
be referred by a DNS server used by the client computer (11, 12, 21) is used 
as environment information that indicates a network environment of the 
client computer (11, 12, 21). 

15 

9. A computer system comprising- a network (100); a server computer 
(110, 120) connected to the network; a plurality of client computers (11, 12, 
21) connectable to the network; and portable information recording media 
(Rll, R12, R21) issued respectively to individual users for use upon 

20 connection to the client computers; wherein 

a unique identification code (ID(ll), ID(l2), ID(2l)) is recorded in 
each of the client computers (11, 12, 21) so as to enable distinction from 
other client computers, 

an identification code (ID(ll), ID(12), ID(2l)) that corresponds to a 

25 specific identification code recorded in a specific client computer and 
environment information (ENV(ll), ENV(l2), ENV(2l)) that indicates a 
specific network environment that is obtained when a client computer (11, 
12, 21) is connected to a specific location of the network (100) are recorded in 
each of the portable information recording media (Rll, R12, R21), and 

30 each of the client computers (11, 12, 21) comprises an interface 

means (11D) for connecting a portable information recording medium (Rll, 
R12, R2l), an identification code comparing means (11C) that compares an 
identification code (ID(ll)) recorded in a currently connected portable 
information recording medium (Rll) and an identification code (ID(ll)) 

35 recorded in itself, an environment comparing means (11H) that compares a 
network environment indicated by environment information (ENV(ll)) 
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recorded in a currently connected portable information recording medium 
(Rll) and a current network environment of itself, an access right setting 
means (11B) that sets a predetermined access right based on comparison 
results, and a server access means (11A) that performs access to the server 
5 computer within a range of the access right that has been set. 

10. A computer system comprising- a network (100); a server computer 
(110, 120) connected to the network; a plurality of client computers (11, 12, 
21) connectable to the network; and portable information processing devices 

10 (Pll) issued respectively to individual users for use upon connection to the 
client computers; wherein 

a unique identification code (ID(ll), ID(l2), ID(2l)) is recorded in 
each of the client computers (11, 12, 21) so as to enable distinction from 
other client computers, 

15 an identification code (ID(ll), ID(l2), ID(2l)) that corresponds to a 

specific identification code recorded in a specific client computer and 
environment information (ENV(ll), ENV(l2), ENV(2l)) that indicates a 
specific network environment that is obtained when a client computer (11, 
12, 21) is connected to a specific location of the network (100) are recorded in 

20 each of the portable information processing devices (Pll), 

each of the client computers (11, 12, 21) comprises an interface 
means (11D) for connecting a portable information processing device (Pll), 
and a server access means (11A) that performs access to the server 
computer (110, 120) within a range of an access right that is transmitted 

25 from a currently connected portable information processing device (Pll), 
and 

each of the portable information processing devices (Pll) comprises 
an identification code comparing means (llE) that compares an 
identification code (ID(ll)) recorded in a currently connected client 

30 computer (ll) and an identification code (ID(ll)) recorded in itself, an 
environment comparing means (ill) that compares a network environment 
of the currently connected client computer and a network environment 
indicated by environment information (ENV(ll)) recorded in itself, an 
access right setting means (11F) that sets a predetermined access right 

35 based on comparison results, and an access right transmitting means (11G) 
that transmits, to the currently connected client computer (ll), the access 
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right that has been set. 

11. The computer system according to Claim 9 or 10, wherein 

the access right setting means (11B, 11F) sets a first access right 
5 when the result of comparison by the identification code comparing means 
(11C, HE) indicates matching, sets a second access right, with more 
restrictions than the first access right, when the result of comparison by the 
identification code comparing means (11C, HE) indicates mismatching but 
the result of comparison by the environment comparing means (11H, HI) 
10 indicates matching, and sets a third access right, with even more 
restrictions than the second access right, when neither of the comparison 
results indicates matching. 

12. The computer system according to Claim 9 or 10, wherein 

15 the access right setting means (11B, 11F) sets a first access right 

when both the result of comparison by the identification code comparing 
means (11C, HE) and the result of comparison by the environment 
comparing means (11H, HI) indicate matching, sets a second access right, 
with more restrictions than the first access right, when the result of 

20 comparison by the identification code comparing means (11C, HE) indicates 
matching but the result of comparison by the environment comparing means 
(11H, HI) indicates mismatching, and sets a third access right, with even 
more restrictions than the second access right, when neither of the 
comparison results indicates matching. 

25 

13. An access right setting method for a computer system comprising* a 
network (100)" a server computer (110, 120) connected to the network; and a 
plurality of client computers (11, 12, 21) connectable to the network; the 
method setting an access right when each individual user uses a client 

30 computer to access the server computer and comprising: 

a preparation step, wherein a portable information processing device 
(Pll), to be used by connecting to a client computer (11, 12, 21), is issued to 
each individual user, and an identification code (ID(ll)), corresponding to a 
unique identification code that is recorded in a specific client computer (11) 

35 and enables distinction of the specific client computer from other client 
computers, is recorded in the portable information processing device; and 
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an access right setting step, wherein when a user connects a 
predetermined portable information processing device (Pll), issued to 
him/herself, to a predetermined client computer (ll) and performs a login 
procedure on the predetermined client computer, the predetermined client 
5 computer (ll) or the predetermined portable information processing device 
(Pll) is made to compare an identification code (ID(ll)) recorded in the 
predetermined client computer (ll) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll) 
and set a predetermined access right based on a comparison result; 
10 wherein when in the access right setting step, the comparison result 

indicates mismatching, an access right with more restrictions than when 
the comparison result indicates matching is set. 

14. An access right setting method for a computer system comprising- a 

15 network (100); a server computer (110, 120) connected to the network; and a 
plurality of client computers (11, 12, 21) connectable to the network; the 
method setting an access right when each individual user uses a client 
computer to access the server computer and comprising* 

a preparation step, wherein a portable information processing device 

20 (Pll), to be used by connecting to a client computer (ll, 12, 21), is issued to 
each individual user, and environment information (ENV(ll)) that indicates 
a specific network environment that is obtained when a client computer (ll) 
is connected to a specific location of the network (100) is recorded in the 
portable information processing device; and 

25 an access right setting step, wherein when a user connects a 

predetermined portable information processing device (Pll), issued to 
him/herself, to a predetermined client computer (ll) and performs a login 
procedure on the predetermined client computer, the predetermined client 
computer (ll) or the predetermined portable information processing device 

30 (Pll) is made to compare a current network environment of the 
predetermined client computer (ll) with a network environment indicated 
by environment information (ENV(ll)) recorded in the predetermined 
portable information processing device (Pll) and set a predetermined access 
right based on a comparison result; 

35 wherein when in the access right setting step, the comparison result 

indicates mismatching, an access right with more restrictions than when 
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the comparison result indicates matching is set. 

15. An access right setting method for a computer system comprising' a 
network (100); a server computer (110, 120), connected to the network; and 
5 a plurality of client computers (11, 12, 21) connectable to the network; the 
method setting an access right when each individual user uses a client 
computer to access the server computer and comprising- 

a preparation step, wherein a portable information processing device 
(Pll), to be used by connecting to a client computer (11, 12, 21), is issued to 

10 each individual user, and an identification code (ID(ll)), corresponding to a 
unique identification code that is recorded in a specific client computer (ll) 
and enables distinction of the specific client computer from other client 
computers, and environment information (ENV(ll)) that indicates a specific 
network environment that is obtained when a client computer (ll) is 

15 connected to a specific location of the network (100) are recorded in the 
portable information processing device; and 

an access right setting step, wherein when a user connects a 
predetermined portable information processing device (Pll), issued to 
him/herself, to a predetermined client computer (ll) and performs a login 

20 procedure on the predetermined client computer, the predetermined client 
computer (ll) or the predetermined portable information processing device 
(Pll) is made to compare an identification code (ID(ll)) recorded in the 
predetermined client computer (ll) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll), 

25 compare a current network environment of the predetermined client 
computer (ll) with a network environment indicated by environment 
information (ENV( 11)) recorded in the predetermined portable information 
processing device (Pll), and set a predetermined access right based on 
comparison results; 

30 wherein in the access right setting step, if an identification code 

comparison result indicates matching, a first access right is set, if the 
identification code comparison result indicates mismatching but a network 
environment comparison result indicates matching, a second access right, 
with more restrictions than the first access right, is set, and if neither of the 

35 comparison results indicate matching, a third access right, with even more 
restrictions than the second access right, is set. 
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16. An access right setting method for a computer system comprising- a 
network (100); a server computer (110, 120), connected to the network; and 
a plurality of client computers (11, 12, 21) connectable to the network; the 
method setting an access right when each individual user uses a client 
computer to access the server computers and comprising- 

a preparation step, wherein a portable information processing device 
(Pll), to be used by connecting to a client computer (11, 12, 21), is issued to 
each individual user, and an identification code (ID(ll)), corresponding to a 
unique identification code that is recorded in a specific client computer (11) 
and enables distinction of the specific client computer from other client 
computers, and environment information (ENV(ll)) that indicates a specific 
network environment that is obtained when a client computer (11) is 
connected to a specific location of the network (100) are recorded in the 
portable information processing device; and 

an access right setting step, wherein when a user connects a 
predetermined portable information processing device (Pll), issued to 
him/herself, to a predetermined client computer (ll) and performs a login 
procedure on the predetermined client computer, the predetermined client 
computer (ll) or the predetermined portable information processing device 
(Pll) is made to compare an identification code (ID(ll)) recorded in the 
predetermined client computer (ll) with an identification code (ID(ll)) 
recorded in the predetermined portable information processing device (Pll), 
compare a current network environment of the predetermined client 
computer (ll) with a network environment indicated by environment 
information (ENV(ll)) recorded in the predetermined portable information 
processing device (Pll), and set a predetermined access right based on 
comparison results; 

wherein in the access right setting step, if both an identification code 
comparison result and a network environment comparison result indicate 
matching, a first access right is set, if the identification code comparison 
result indicates matching but the network environment comparison result 
indicates mismatching, a second access right, with more restrictions than 
the first access right, is set, and if neither of the comparison results indicate 
matching, a third access right, with even more restrictions than the second 
access right, is set. 
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17. A program for making a computer function as a client computer in 
the computer system according to any one of Claims 1 through 12 or a 
computer-readable recording medium recording the program. 
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